How severe is CVE-2025-62520?

CVE-2025-62520 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.

Is CVE-2025-62520 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (15th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-62520?

CVE-2025-62520 affects Mantisbt. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-62520?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-62520 have an EU (EUVD) identifier?

Yes. CVE-2025-62520 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-37521.

When was CVE-2025-62520 published?

CVE-2025-62520 was published on 2025-11-04 and last updated on 2026-06-17.

CVE-2025-62520

CVE-2025-62520 is a medium-severity vulnerability in Mantisbt with a CVSS 3.x base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-285.

Key facts

Severity: Medium (CVSS 3.x base score 4.3)
CVSS v4: 5.3
EPSS exploit prediction: 0% (15th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-37521
Weakness: CWE-285
Affected product: Mantisbt
Published: 2025-11-04
Last modified: 2026-06-17

Description

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, due to insufficient access-level checks, any non-admin user with access to manage_config_columns_page.php can use the Copy From action to retrieve the columns configuration from a private project they have no access to. This issue is fixed in version 2.27.2.

Frequently asked questions

What is CVE-2025-62520?: Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, due to insufficient access-level checks, any non-admin user with access to manage_config_columns_page.php can use the Copy From action to retrieve the columns configuration from a private project they have no access to. This issue is fixed in version 2.27.2.
How severe is CVE-2025-62520?: CVE-2025-62520 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2025-62520 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (15th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-62520?: CVE-2025-62520 affects Mantisbt. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-62520?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-62520 have an EU (EUVD) identifier?: Yes. CVE-2025-62520 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-37521.
When was CVE-2025-62520 published?: CVE-2025-62520 was published on 2025-11-04 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*

More vulnerabilities in Mantisbt

CVE-2026-30849 — Critical (CVSS 9.8): Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions prior to 2.28.1 running on MySQL family…
CVE-2019-15074 — Critical (CVSS 9.6): The Timeline feature in my_view_page.php in MantisBT through 2.21.1 has a stored cross-site scripting (XSS)…
CVE-2025-47776 — Critical (CVSS 9.1): Mantis Bug Tracker (MantisBT) is an open source issue tracker. Due to incorrect use of loose (==) instead of strict…
CVE-2017-7615 — High (CVSS 8.8): MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value…
CVE-2024-23830 — High (CVSS 8.3): MantisBT is an open source issue tracker. Prior to version 2.26.1, an unauthenticated attacker who knows a user's email…
CVE-2009-20001 — High (CVSS 8.1): An issue was discovered in MantisBT before 2.24.5. It associates a unique cookie string with each user. This string is…

All CVEs affecting Mantisbt →

Other CWE-285 (Improper Authorization) vulnerabilities

CVE-2025-65041 — Critical (CVSS 10.0): Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
CVE-2023-33189 — Critical (CVSS 10.0): Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization…
CVE-2022-2595 — Critical (CVSS 10.0): Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1.
CVE-2021-28799 — Critical (CVSS 10.0): An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If…
CVE-2026-34048 — Critical (CVSS 9.9): Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to…
CVE-2026-5412 — Critical (CVSS 9.9): In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controller facade. An authenticated…

Browse all CWE-285 (Improper Authorization) vulnerabilities →